In case you missed it, the Office of the Privacy Commissioner of Canada (OPC) posted Report of Findings #2013-004 (dated July 18, 2013) on November 4, 2013 relating to an access inquiry by a former employee of a bank under the Personal Information Protection and Electronic Documents Act. The decision is interesting for two issues — the way the OPC approached a release that had been given by the employee and they way the bank and the OPC resolved the tensions in balancing the interests of different individuals in respect of the same information. The second issue will be the subject of a subsequent post. In this post, I comment on the OPC's refusal to discontinue the investigation when the bank raised the issue of the release given by the complainant.
The Employment Dispute
The complainant had been employed as a manager at a bank. During his employment, the complainant was subject to a performance review by colleagues. When his employment ended (the report indicates the requester resigned), the complainant signed settlement documentation that, in the words of the OPC decision, "confirmed that he had the opportunity to seek legal advice and had agreed not to make any claim, or institute any complaint against the bank under 'any federal ... legislation, including those pertaining to...privacy regulations'."
The Access Request
After leaving his employment, the ex-manager sought access to his personal information, which included documents relating to a review of the ex-manager and other documents relating to his employment. The ex-manager was unsatisfied with the bank's disclosure and made a complaint to the Office of the Privacy Commissioner.
Bank Seeks Discontinuance of Investigation
From the Report of Findings, it appears that the bank did not initially rely on the release in its response to the complaint and only raised it once the OPC prepared a preliminary report. The banks sought to have the OPC discontinue the complaint, relying on subsection 12.2(1)(b) of PIPEDA. Subsection 12.2(1)(b) of PIPEDA provides the OPC with discretion to discontinue an investigation if "the complaint is trivial, frivolous or vexatious or is made in bad faith".
It is unclear why the bank did not rely on the release initially when the complaint was brought. The decision may have been tactical or there may have been an oversight. Either way, the OPC refused to discontinue the investigation. The OPC rejected the bank's position. The OPC concluded that the release was too narrow. The release covered matters related "to the hiring of, the employment by, and the termination of the Employee's employment by the Employer". The OPC held that the claims in issue were related to the bank's response to his access request. The complaint was, of course, in respect of a request to access documents relating to the employment by and the termination of the ex-manager. However, this was not sufficient to bring the complaint to the OPC within the scope of the release.
In addition, the OPC concluded that the bank raised the argument at too late a stage in the investigation. The bank also failed to raise the release as a potential obstacle for the ex-manager when it informed the ex-manager that he could complaint to the OPC regarding the bank's handling of the access request.
Time to Revise Releases
Going forward, litigators should ensure that they have a broad release and covenant not to bring complaints before the OPC and must raise that release early if they wish to rely on the release as a basis to request the OPC discontinue complaints.
For more information, visit our Data Governance Law blog at www.datagovernancelaw.com
Dentons is a global firm driven to provide you with the competitive edge in an increasingly complex and interconnected marketplace. We were formed by the March 2013 combination of international law firm Salans LLP, Canadian law firm Fraser Milner Casgrain LLP (FMC) and international law firm SNR Denton.
Dentons is built on the solid foundations of three highly regarded law firms. Each built its outstanding reputation and valued clientele by responding to the local, regional and national needs of a broad spectrum of clients of all sizes – individuals; entrepreneurs; small businesses and start-ups; local, regional and national governments and government agencies; and mid-sized and larger private and public corporations, including international and global entities.
Now clients benefit from more than 2,500 lawyers and professionals in 79 locations in 52 countries across Africa, Asia Pacific, Canada, Central Asia, Europe, the Middle East, Russia and the CIS, the UK and the US who are committed to challenging the status quo to offer creative, actionable business and legal solutions.
Learn more at www.dentons.com
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances. Specific Questions relating to this article should be addressed directly to the author.